Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft
File: 1nXJVO45yR5SX2izBxygV41qW64.mft (raw, json)
Hash identifier: /VPWvMQYTNawcIWa0UX0lG+sFRbF+YllWTUW8uOdstg=
Subject key identifier: 7E:08:9B:D2:14:74:0F:C0:53:90:3F:0F:7F:C2:11:9D:A3:B7:84:65
Authority key identifier: D6:75:C9:54:EE:39:C9:1E:52:5F:68:B3:07:1C:A0:57:8D:6A:5B:AE
Certificate issuer: /CN=d675c954ee39c91e525f68b3071ca0578d6a5bae
Certificate serial: 019659153091BE97FFAD80DF3E0BF8D161C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nXJVO45yR5SX2izBxygV41qW64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft
Manifest number: 14FC
Signing time: Mon 21 Apr 2025 16:01:22 +0000
Manifest this update: Mon 21 Apr 2025 16:01:22 +0000
Manifest next update: Tue 22 Apr 2025 16:01:22 +0000
Files and hashes: 1: 1nXJVO45yR5SX2izBxygV41qW64.crl (hash: oX98TeRy/RQUoFOXbSOe4vbqLofCFWR79ivOiFZg3mU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nXJVO45yR5SX2izBxygV41qW64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:15:30:91:be:97:ff:ad:80:df:3e:0b:f8:d1:61:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d675c954ee39c91e525f68b3071ca0578d6a5bae
Validity
Not Before: Apr 21 16:01:22 2025 GMT
Not After : Apr 22 16:01:22 2025 GMT
Subject: CN=7e089bd214740fc053903f0f7fc2119da3b78465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:34:36:b5:d8:6d:88:40:77:8e:c4:73:31:70:
90:7f:ba:db:1d:32:5c:8c:19:ab:2c:03:90:e4:75:
5f:cd:33:cc:52:e3:14:01:10:12:e6:8e:5d:f6:69:
f3:5f:02:40:d0:33:ed:ef:a8:04:02:63:11:ad:e1:
e9:b9:d3:80:09:8f:2b:d2:55:22:9d:7f:c9:26:4e:
ef:f6:ac:bf:44:e3:b1:e1:e2:99:81:8e:c2:2c:09:
83:ab:15:3c:77:bd:cf:5e:b4:c6:be:75:b7:f5:bc:
67:8c:6a:a2:3c:b0:02:3c:e6:35:6c:ea:ce:77:7a:
c0:e8:3c:0b:ea:14:69:00:0c:dd:e7:4b:de:11:c7:
84:06:b0:52:aa:31:9f:a7:d1:94:3e:de:c8:bf:b2:
a0:89:9c:03:b0:a9:8d:ff:e9:85:2f:66:6e:c3:25:
a2:1e:e5:d0:7e:ea:fd:40:f4:d9:ec:ee:c2:15:bf:
dc:06:42:c6:22:6c:91:c2:3e:92:3c:30:c7:0b:bf:
12:c1:4e:f2:06:1b:6d:69:f6:56:fe:5a:2b:a5:62:
53:30:73:3e:da:e8:b0:26:9b:41:bd:44:4d:38:c2:
4d:a9:71:4b:41:6a:2b:6a:22:1c:4d:57:16:8d:d0:
29:95:fd:b1:7f:dc:ca:d1:c0:78:9b:12:0b:0a:2d:
51:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:08:9B:D2:14:74:0F:C0:53:90:3F:0F:7F:C2:11:9D:A3:B7:84:65
X509v3 Authority Key Identifier:
keyid:D6:75:C9:54:EE:39:C9:1E:52:5F:68:B3:07:1C:A0:57:8D:6A:5B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nXJVO45yR5SX2izBxygV41qW64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:db:09:4a:96:26:c0:ba:60:80:16:bc:23:e5:21:67:62:81:
92:cc:dc:16:91:b1:41:35:33:ce:18:1e:14:79:e6:c9:dc:32:
89:cd:3b:1d:34:54:3c:62:19:9c:2f:79:94:d3:77:47:90:a4:
27:87:cb:b5:a5:47:39:6b:44:44:26:f4:2d:37:25:92:06:f5:
1f:10:b4:9d:3a:9c:52:85:e9:f1:59:9f:a4:5b:21:0d:66:8b:
71:a8:27:2f:d7:d0:76:77:3f:94:17:f6:32:d6:3f:0d:53:3c:
59:2a:d3:bb:95:ee:9d:0d:30:f4:a1:a9:c2:08:5f:6a:a2:28:
d6:03:63:4a:9f:a4:2e:24:d0:f2:4a:da:0a:6e:6c:fa:77:92:
99:1f:42:9e:39:5c:c3:95:5e:8f:e7:65:04:a4:b5:82:d4:ae:
58:fe:9b:6b:7c:50:e5:2e:a9:ab:e7:9a:18:7e:d6:32:c9:eb:
9a:bd:95:4e:c5:3a:26:b6:fa:ef:d1:a9:b2:a8:2f:80:72:c1:
3a:ee:5b:b0:1b:00:7f:de:c7:9d:05:cc:f4:da:75:e5:e5:0b:
55:c3:4d:da:86:dc:13:4d:e2:f3:20:7f:8a:2e:f1:61:d2:04:
2e:8e:88:b8:db:cd:17:ac:8c:af:dc:0c:bd:0f:11:2f:53:8e:
11:74:1a:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZZFTCRvpf/rYDfPgv40WHJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NzVjOTU0ZWUzOWM5MWU1MjVmNjhiMzA3MWNhMDU3OGQ2
YTViYWUwHhcNMjUwNDIxMTYwMTIyWhcNMjUwNDIyMTYwMTIyWjAzMTEwLwYDVQQD
Eyg3ZTA4OWJkMjE0NzQwZmMwNTM5MDNmMGY3ZmMyMTE5ZGEzYjc4NDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszQ2tdhtiEB3jsRzMXCQf7rbHTJc
jBmrLAOQ5HVfzTPMUuMUARAS5o5d9mnzXwJA0DPt76gEAmMRreHpudOACY8r0lUi
nX/JJk7v9qy/ROOx4eKZgY7CLAmDqxU8d73PXrTGvnW39bxnjGqiPLACPOY1bOrO
d3rA6DwL6hRpAAzd50veEceEBrBSqjGfp9GUPt7Iv7KgiZwDsKmN/+mFL2ZuwyWi
HuXQfur9QPTZ7O7CFb/cBkLGImyRwj6SPDDHC78SwU7yBhttafZW/lorpWJTMHM+
2uiwJptBvURNOMJNqXFLQWoraiIcTVcWjdAplf2xf9zK0cB4mxILCi1RQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH4Im9IUdA/AU5A/D3/CEZ2jt4RlMB8GA1UdIwQY
MBaAFNZ1yVTuOckeUl9oswccoFeNaluuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW5YSlZPNDV5UjVTWDJpekJ4eWdWNDFxVzY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC80M2MzNGItZThkMC00NWEyLTk0MGUt
NTcxN2NmNTJjNzlhLzEvMW5YSlZPNDV5UjVTWDJpekJ4eWdWNDFxVzY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC80M2MzNGItZThkMC00NWEyLTk0MGUtNTcxN2NmNTJjNzlh
LzEvMW5YSlZPNDV5UjVTWDJpekJ4eWdWNDFxVzY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAadsJSpYm
wLpggBa8I+UhZ2KBkszcFpGxQTUzzhgeFHnmydwyic07HTRUPGIZnC95lNN3R5Ck
J4fLtaVHOWtERCb0LTclkgb1HxC0nTqcUoXp8VmfpFshDWaLcagnL9fQdnc/lBf2
MtY/DVM8WSrTu5XunQ0w9KGpwghfaqIo1gNjSp+kLiTQ8kraCm5s+neSmR9Cnjlc
w5Vej+dlBKS1gtSuWP6ba3xQ5S6pq+eaGH7WMsnrmr2VTsU6Jrb679GpsqgvgHLB
Ou5bsBsAf97HnQXM9Np15eULVcNN2obcE03i8yB/ii7xYdIELo6IuNvNF6yMr9wM
vQ8RL1OOEXQaJw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 22:23:18 2025 by rpki-client